Pause and inspect
Unexpected urgency, a changed sender address, a surprising attachment, or a request for passwords or payment details are reasons to stop. A familiar name alone is not proof that a message is genuine.
What to do
- Do not click links, open attachments, reply, or forward the message to coworkers.
- Report it through your organization's approved phishing-report method or contact Softfusion support. Send the original message using the procedure your help desk recommends.
- If you already clicked, entered credentials, or opened a file, say so immediately and tell support exactly what happened. Early reporting helps contain the issue.
Next step
Use a known phone number or a separately bookmarked website to verify an unusual request. Do not use contact details supplied in the suspicious message. See CISA's phishing guidance.